From a5f027e8966e94063eaf2b0491bfc326e598c9fb Mon Sep 17 00:00:00 2001 From: t3chn0m4g3 Date: Thu, 2 Aug 2018 14:52:50 +0000 Subject: [PATCH] update glutton --- docker/glutton/dist/rules.yaml | 6 ++++++ etc/compose/experimental.yml | 3 ++- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/docker/glutton/dist/rules.yaml b/docker/glutton/dist/rules.yaml index 837a078d..be5e21c2 100644 --- a/docker/glutton/dist/rules.yaml +++ b/docker/glutton/dist/rules.yaml @@ -14,12 +14,18 @@ rules: - match: tcp dst port 445 type: conn_handler target: smb + - match: tcp dst port 1883 + type: conn_handler + target: mqtt - match: tcp dst port 3389 type: conn_handler target: rdp - match: tcp dst port 5060 type: conn_handler target: sip + - match: tcp dst port 5222 or port 5223 + type: conn_handler + target: jabber - match: tcp type: conn_handler target: default diff --git a/etc/compose/experimental.yml b/etc/compose/experimental.yml index d1d24e87..a277fb8a 100644 --- a/etc/compose/experimental.yml +++ b/etc/compose/experimental.yml @@ -234,6 +234,7 @@ services: restart: always tmpfs: - /var/lib/glutton:uid=2000,gid=2000 + - /run:uid=2000,gid=2000 network_mode: "host" cap_add: - NET_ADMIN @@ -241,7 +242,7 @@ services: read_only: true volumes: - /data/glutton/log:/var/log/glutton - - /root/tpotce/docker/glutton/dist/rules.yaml:/opt/glutton/rules/rules.yaml +# - /root/tpotce/docker/glutton/dist/rules.yaml:/opt/glutton/rules/rules.yaml # Mailoney service mailoney: